CVE-2020-26950: Use After Free

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1675905
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-49/
• http://packetstormsecurity.com/files/166175/Firefox-MCallGetProperty-Write-Side-Effects-Use-After-Free.html
• https://www.mozilla.org/security/advisories/mfsa2020-49/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2020-49

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2020-26950

Frequently Asked Questions

• What is CVE-2020-26950?

  CVE-2020-26950 is a vulnerability in Mozilla Firefox and Firefox ESR that allows an exploit involving a use-after-free condition.

• How severe is CVE-2020-26950?

  CVE-2020-26950 has a severity rating of critical.

• Which software versions are affected by CVE-2020-26950?

  Mozilla Firefox versions up to 82.0.3, Firefox ESR versions up to 78.4.1, and Thunderbird versions up to 78.4.2 are all affected by CVE-2020-26950.

• How can I fix CVE-2020-26950?

  To fix CVE-2020-26950, update Mozilla Firefox to version 82.0.3, Firefox ESR to version 78.4.1, or Thunderbird to version 78.4.2.

• Where can I find more information about CVE-2020-26950?

  You can find more information about CVE-2020-26950 on the Mozilla Bugzilla page (https://bugzilla.mozilla.org/show_bug.cgi?id=1675905) and the Mozilla Security Advisories page (https://www.mozilla.org/en-US/security/advisories/mfsa2020-49/).